Driftwatch

Vercel / Vercel REST API /

Breakingdirection flip: their tools call this safe

protectionMode is no longer accepted

What changed

Usually ignored rather than rejected, so the call succeeds and does something subtly different.

Affects trustedIps.protectionMode on PATCH /v9/projects/{idOrName}. Grep for it: nothing else will tell you.

Who is affected

Code that sends PATCH /v9/projects/{idOrName} (trustedIps.protectionMode).

Before and after

WhereBeforeAfter
PATCH /v9/projects/{idOrName} · trustedIps.protectionModepresentabsent

Code that breaks

await client.post("/v9/projects/{idOrName}", {
  // protectionMode is now ignored, not rejected
  protectionMode: value,
});

Based on Vercel’s published API specification. How severity is decided.